> Markdown version of [/jobs/ext/4624883-information-security-lead](https://www.wearedevelopers.com/jobs/ext/4624883-information-security-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Lead

- **Company:** BOA Technology, Inc.
- **Location:** Denver, CO, United States (Remote available)
- **Experience:** Expert
- **Salary:** $105,000 - $125,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Microsoft Antivirus, Apple Mac Systems, Microsoft Azure, Business Systems, CompTIA Security+, Cyber Security, Information Systems, Disaster Recovery, Identity and Access Management, Information Technology Operations, Information Systems Security Architecture Professional, Linux System Administration, Microsoft Security Essentials, Azure Active Directory, Anti-Phishing, Software Systems, Software Vulnerability Management, IT General Controls (ITGC), Microsoft InTune, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Cybercrime, CIS Benchmarks
- **Published:** November 7, 2026
- **Apply:** https://www.denverjobsite.com/job.asp?id=3502435407&tx=KR3131FFP&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.
 * 5+ years of professional experience in information security, IT risk management, or IT operations with significant security responsibilities.
 * Practical experience applying recognized security frameworks, such as NIST CSF 2.0, CIS Controls, or ISO/IEC 27001, to risk assessments, policies, controls, and program improvement.
 * Working knowledge of Windows, macOS, and Linux environments, and Microsoft security and identity technologies, including Microsoft 365, Azure, Active Directory, Microsoft Entra ID, Intune, and Microsoft Defender.
 * Hands-on proficiency in monitoring and triaging security alerts, investigating potential threats, and initiating appropriate incident response actions.
 * Solid understanding of networking, identity and access management, and on-premises and cloud infrastructure security fundamentals.
 * Strong communication, organizational, and analytical skills, with the ability to coordinate security initiatives across technical teams, departments, and 3rd parties.

## Description

Reporting to the Director of Business Systems and IT, the Information Security Lead coordinates and advances BOA's global cybersecurity program, focusing primarily on Information Systems Governance/Risk/Compliance (GRC) and day-to-day security operations.

Working closely with IT Operations and Business Systems Analysts, this position supports the development and execution of BOA's security roadmap, maintains security policies and controls, coordinates security assessments and audits, tracks identified risks, and drives remediation activities.

The role combines security program coordination with hands-on operational responsibilities, including triaging security alerts, supporting incident response, facilitating access reviews, managing vulnerability remediation workflows, and delivering employee security awareness initiatives.

Responsibilities (EN):

Core Responsibilities

 * Reflect and role model BOA's vision, values and Leadership Model and demonstrate passion for our mission across the IT team and rest of the organization
 * Support the development and execution of BOA's information security strategy and multi-year roadmap in partnership with the Director of Business Systems and IT.
 * Assess security program maturity using NIST CSF 2.0; coordinate annual independent security assessments and audits; document, prioritize, and track findings through remediation closure.
 * Develop and maintain enterprise security policies, standards, and procedures; manage the information security risk register, risk management plans, and documented exception process across global operations.
 * Oversee identity and access governance, including periodic user access reviews, privileged access oversight, and segregation of duties (SoD), providing an independent control-review perspective.
 * Serve as the primary information security contact for internal and external auditors; coordinate control evidence and support SOX ITGC testing and remediation.
 * Manage third-party cyber risk through vendor assessments, review of vendor security reports and other assurance materials, and follow-up on identified gaps.
 * Lead global security awareness initiatives, including phishing simulations and practical guidance on social engineering, data protection, and secure use of software systems and tools.
 * Lead the vulnerability management process: evaluate exposure and business impact, establish remediation priorities and timelines, coordinate with IT Operations, and verify corrective actions.
 * Oversee security monitoring coverage and investigate or triage security alerts, events, and tickets; collaborate with external security service providers and internal technical teams as needed.
 * Maintain and exercise incident response procedures; coordinate investigations, escalation, containment, recovery, and lessons learned. Partner with IT Operations on disaster recovery exercises and resilience testing.
 * Define and report meaningful security metrics, control effectiveness, program progress, and material risks to IT and company leadership; advise on security requirements for technology and business initiatives.
 * Monitor relevant cyber threats, regulatory developments, and security practices; recommend pragmatic improvements suited to BOA's risk profile., * Relevant industry certifications, such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC)
 * Experience improving security monitoring, incident response, tabletop exercises, or business continuity and disaster recovery readiness.
 * Experience coordinating security or compliance audits, preparing control evidence, performing access reviews, or supporting SOX ITGC activities.
 * Experience in a global, multi-site manufacturing, distribution, or consumer products organization.